[plug] Korea and port 12345 (was: MS up to)

[Craig Foster]

Hmmm, remember seeing something like that.

Brings up a good question though....

I receive linux-focus and ms-focus from security focus, have some time
left on the RedHat Network, have important emails forwarded from
MS-BugTraq, regularly check dshields.org, and check El Reg
(theregister.co.uk) for stuff that's missed elsewhere.

But I'm starting to lose control of what's important, and what's not.
The signal-to-noise ratio in all the lists are at all time lows, and I
could have missed the new worm Leon was talking about.

What do people suggest a good linux/ms/network admin read these days to
stay on top of exploits and virii?

Regards,

Craig Foster

PS I've got services on the machine to pickup and block scanners, close
almost all ports, and (obviously) block external DNS. So lists aren't my
only defense...

PPS Dropping The Register is *not* an option!! :)

> -----Original Message-----
> From: Leon Brooks [mailto:leon at brooks.fdns.net]
> Sent: Sunday, 23 December 2001 11:43 AM
> To: plug at plug.linux.org.au
> Subject: Re: [plug] Korea and port 12345 (was: MS up to)
>
>
> On Sunday 23 December 2001 11:37, Craig Foster wrote:
> > PS Also being hit hard by korean DSL users for port
> 12345, but that's just
> > par for the course...
>
> Ah, that might be the new spaces-in-filename Microsoft worm
> we were warned
> about late last week. Don't remember hearing that it went
> looking for NetBus,
> though.
>
> Cheers; Leon
>
>
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 2228 bytes
Desc: not available
URL: <http://lists.plug.org.au/pipermail/plug/attachments/20011223/29f0cfa2/attachment.bin>